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Law Enforcement Technical Forum 
Fredericksburg, Virginia 
March 5-6, 2013 



Administrative Matters/Welcome 

I Sup ervisory Special Agent, CIU, FBI 


welcomed everyone to the Law Enforcement Technical Forum (LETF) 
Conference and asked attendees to introduce themselves to the group. 


A special “thank you” was given tc 


Itor coordinating the event. 
Travel vouchers are due by March 12, 2Ul3. 


introduced SSA 


liaison representative. 


Welcome/Update of the FBI's Nati onal Domestic Communications Assistance Center (NDCAC) 

I I NDCAC, FBI 

I welcomed the group and provided an overview of the NDCAC and its recent 


relocation to Fredericksburg, Virginia. She introduced the NDCAC staff present at the 
meeti ng and briefly described the roles each would be filling at the NDCAC. 
o} twill Ipd the Technology Sharing function, 


|s responsible for Training provided by the NDCAC and leveraging 


the training of other agencies on behalf of the NDCAC, 


|will lead the Help Desk in providing 24/7 support to the law 
enforcement community, 


:ND 

and 


Igroun of the NDCAC and is curre ntly 


working on suc h issues as| 

o I lis the Npn AP’c law enforcement liais on representative. 


tooth from thd 


] 


fee also cont ributing to various NDCAC initiatives. 

^described the recently complete f 


plso mentioned that the AskCALEA website is expected to be operational again 


in June 2013. 
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Agenda 


Ad ministrative Mat ters/Welcome 


Adm 

SSf_ 


Supervisory Special Agent, CIU, CIS, OTD, FBI 


Welcome Remarks and NDCAC Update 


SC\ 

ui 


Cl, OTD, FBI 


NDCAC, OTD, FBI 


• Re oinnal Cnmnnt er Forensic Lab (R CFL) Unit 

UQ RCFL Unit\ \)TD, FBI 


RCFL Unit, 

Technology Trends 
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Steve L. Stoner, Department of Defense 


I 


FBI 


[Town Hall Meeting 


CIS, OTD, FBI 


National Pnmnn 


er Forensics Institute 

Director NCFL USSS 
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CID, FBI 

National Domestic Communications Assistance Center (NDCAC) Tour 

DAD Tony DiClemente, OTD, FBI 

I I 


SSA 


[A TDCAC, OTD, FBI 

i ~3NDCAC, OTD, FBI 


NDCAC. O TD, FBI 


NDCAC, OTD, FBI 


WDCAC, OTD, FBI 
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Welcome Remarks 

SC William Searcy, Cl, OTD, FBI 

• SC Searcy provided brief remarks on the importance of State and local law enforcement 
outreach and how cooperation and coordination of efforts improves the chances of success. 

• SC Searcy identified a potential issue with the upcoming co nference in San Antonio. Budge t 
related concerns may impact the conference. Going forward] 


Re gional Compute r Forensic Lab (RCFL) Unit 

RCFL Unit, DES, OTD, FBI 


Kegio 


• | provided LETF members a detailed description / introduction of the roles and 
support functions provided by RCFLs. 

• An RCFL is a digital forensics laboratory and training canter devoted to the examination of 
digital evidence in support of criminal investigations and to the detection and prevention of 
terrorist acts. The first RCFL was established in San Diego, California in 1999, and began as 
a cooperative effort between the FBI and other Federal, State, and local law enforcement 
agencies to address digital evidence. The RCFL Program is based on this model of 
partnership between the FBI and other law enforcement agencies at the Federal, State, and 
local levels operating within a geographic area. 

• In addition to the San Diego RCFL, RCFLs are operating in Albuquerque, New Mexico; 
Buffalo, New York; Chicago, Illinois; Dallas, Texas; Dayton, Ohio; Denver, Colorado; 
Hamilton, New Jersey; Houston, Texas; Kansas City, Missouri; Louisville, Kentucky; Menlo 
Park, California; Orange, California; Philadelphia, Pennsylvania; Portland, Oregon; and Salt 
Lake City, Utah. 


Foi Official USB Only - Law EuftH CtilHent Sensitive 



For Official Use Only - Law Enf o rcemen t Sensitive 


(identified the key goals of the RCFL Program: 

o Provide timely, professional and technically advanced digital forensic services to the 
law enforcement agencies in an RCFL’s service area, 
o Fully utilize applied science and engineering capabilities to support digital forensic 
examinations. 

o Increase confidence of investigators, prosecutors, and judges in the digital forensics 
examination discipline through standardized training and forensic protocols, 
o Provide responsive and flexible services in support of diverse investigative programs. 
o Meet legal and administrative requirements of diverse judicial systems. 

provided the group with a number of illustrative handouts and other guides: 
o 
o 
o 
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Technology Trends 

Steve Stoner, Department of Defense 

• Mr. Stoner began by stating that the presentation would focus on emerging challenges with 
mobile access to the Internet and how is law enforcement affected by changes in mobility 

• According to Mr. Stoner, mobility introduced the Internet to subscribers; mobility changes 
everything. 

• By 2020, there will be 50 billion connections - seven for every person on the planet. 

• The number of connected people is greater than the number of people who can read. 

• The world is becoming saturated with cell phones - nearly 100 percent of the adult population 
in the U.S. owns a cell phone. 

• 70 percent of new phones in the US are smartphones. 

• Worldwide, smartphones account for 1 8 percent of the phones, but 90 percent of the data 
transferred. 

• In 2012 the average user transferred 340 Mb/month. In 2017, it is projected to reach 
2.16Gb/month. 

• Previously, mobile operators added subscribers for growth but that approach is no longer a 
viable option. 

• Wireless devices generate a large demand for data. 

• Wi-Fi offload will become an increasingly used option. 

• Video downloads and videoconferencing have become the norm. 

• Data is doubling every year. This is forcing mobile operators to switch the core revenue 
generator from voice to data. Capital expenditure (CAPEX) is required to prevent chum. 

• There is a lot of digital information available, making it easy to access content. Mobile 
devices allow users to be connected anywhere, anytime. 

• Radio Interface Technologies (RITs) include: 

o 3GPP: High Speed Packet Access (HSPA), HSPA+ 
o 3 GPP: Long Term Evolution (LTE), LTE- Advanced 

• Mr. Stoner showed a chart outlining the evolution of Time Division Multiple Access 
(TDMA), Code Division Multiple Access (CDMA), and Orthogonal Frequency-Division 
Multiple Access (OFDMA) systems. 

• The HSPA revolution has allowed for a six-fold increase in data rate growth. There are 
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multiple teclmology choices that can grow data capacity. 

• LTE offers lower costs per bit of data. To obtain the benefits of LTE, it needs to be at a 
minimum of 10 megahertz (MHz); otherwise, the technology is not much better than HSPA+. 

• Demand for data is outstripping improvements in technology. Operators are mitigating this 
issue with data tiered pricing. 

• The price of smartphones is decreasing, which is resulting in an increase in the number of 
subscribers. 

• The Internet is going mobile and applications like Google Maps provide a lot of access to 
information. 

• There have been approximately 10 billion Apple app downloads since 2007. There are over 
100 app stores. Writing a custom app is simple and can be done by almost anyone. 

• Google is switching to mobile and is on the cusp of knowing everything about everyone. 

• The first 10 years of the 21 st century were used to digitize the world. The next 10 years will be 
about enhancing the world with digital information. 

• The mobile Internet era may render mobile operators to dumb pipes. 

• Asa result of the increase in new mobile technologies, theft is going mobile. 

• The plan is to connect everything in our lives-entertainment, retail, medical, work, and 
school. 

• What do these changes mean for the law enforcement? How can social media be used 
successfully? 

o Traditional media (not searchable) vs. mobile Internet (searchable) 
o Crowdsourcing — act of outsourcing tasks, traditionally performed by an employee or 
contractor, to an undefined, large group of people or a community through an open 
call. Increasingly used for cost efficiency 

o Social media investigations — forensics, public assistance, and detection searches 
o Video surveillance - used to spot a missing child or a terrorist 
o Crime mapping — setup by people in their own communities 

• Why use social media? 

o Community outreach and information 
o Cyber vetting 

o Entrepreneurs are establishing an online presence 
o Provides a direct relationship with the public 
o Tip lines 

• Social media can reposition the relationship of police departments in their respective 
communities. 


provided an overview 
o 

o 

o 
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National Compu ter Forensics institute 

[ Direc tor NCFI, USSS 

provided information on training opportunities related to computer forensics 
and digital handling techniques for State and local law enforcement agencies, prosecutors, and 
judges at the National Computer Forensics Institute (NFCI) facility. 

Established in 2007, the NFCI was founded as a partnership among the United States Secret 
Service (USSS), the Alabama District Attorneys Association, the State of Alabama, and the 
city of Hoover, AL. The courses are based on the USSS electronic crimes training model. 

The mission of the NCFI is to provide state and local law enforcement, prosecutors and 
judicial officials a national standard of training in electronic crimes investigations, network 
intrusion response, computer forensics and high tech crime prosecution. 

Since its opening, the NCFI has trained and equipped 1,925 State and local officials, including 
1,314 State and local police officials, 456 prosecutors and 165 judges from all 50 states and 
three U.S. Territories. These NCFI graduates represent over 1,000 State and local 
government agencies nationwide. 

Advantages for State an local Agencies 

o No Tuition. All travel costs, hotel, and per diem are covered by the NCFI. 
o No Equipment Costs. Students who attend the forensics and Network Intrusion 
courses are issued all of hardware software and licenses necessary to conduct these 
investigations. 

o Example: A Basic Computer Evidence Recovery Training (BCERT) trained officer 
will return to their department trained and equipped; giving their department its own 
computer forensics capability. 

o Membership within the US Secret Service Electronic Crimes Task Force (ECTF) 
Network 
NCFI Courses 

o Advanced Forensics Training (AFT) 


USSS 


o 

o 

o 


Basic Investigation of Computer and Electronic Crimes Program (BICEP) 
Basic Computer Evidence Recovery Training (BCERT) 

Basic Network Investigation Training (BNIT) 
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o Cyber Analyst Crash Course 
o Network Intrusion Response Program (NITRO) 
o Mobile Device Data Recovery (MDDR) 
o Online Social Networking (OSN) 
o Computer Forensics in Court - Prosecutors (CFC-P) 
o Computer Forensics in Court - Judges (CFC-J) 
o Mobile Devices in Court - Prosecutors (MDP) 
o Point of Sales (POS) 


• NCFI courses are in high demand. For every available training slot, the NCFI receives five 
applications. 



National Domestic Communications Assistance Center (NDCAC) Tour 

The scheduled tour did not take place due to inclement weather closing the Federal Government on 
March 6, 2013. 
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LAW ENFORCEMENT TECHNICAL FORUM 
Fredericksburg, Virginia 
March 05 - 06, 2013 



Tuesday, 03/05/13 Day One — LETF 
8:30 a.m. - 9:00 a.m. Registration 


9:00 a.m. - 9:15 a.m. 


Administrative Matters / Welcome 

SSA\ \CIU, CIS, OTD, FBI 


SC William Searcy, CIS, OTD, FBI 

UC\ “ 


OTD, FBI 


9:15 a.m. - 10:00 a.m. National Domestic Communications Assistance Center 

(N DCAO 

ud 


SSA 


10:00 a.m. - 10:15 a.m. BREAK 

10:15 a.m. - 11:30 a.m. Technology Trends 

Steve Stoner, DOD 


11:30 a.m. -Noon 


Noon - 1:00 p.m. 

1:00 p.m. - 2:45 p.m. 

2:45 p.m. - 3:15 p.m. 


LUNCH 


n OTD, FBI 
OTD, FBI 
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3:15 p.m. - 3:30 p.m. BREAK 


3:30 p.m. - 4:15 p.m. 


fnwn Wall Mpfttina 


CIS, OTD, FBI 


4:15 p.m. - 5:00 p.m. National Comput er Forensics Institute 

| birector NCFI, USSS 


Wednesday, 03/06/13 Day Two — LETF 
8:30 a.m. - 9:30 a.m. 



UC | 


OTD, FBI 

9:30 a.m. - 10:30 a.m. 



SSA 


FBI 


10:30 a.m. - Noon 


National Domestic Communications Assistance Center 
(NDCAC) Tour 


DA D Tony DiCleme nte, OT D f FBI_ 
SSA I \nDCAC 


OTD, FBI 
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